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From the Editor 


A November brings Autumn in lull swing with leaves on die ground, sweaters, and sitting by the 
■Mg! owing embers of our LCD screens. Leopard has been released and while many of us have had 
m m access to beta versions, we didn't always have the best documentation. Enter this month's 
MacTech* Starting with this issue, we're dedicated to getting you the information you need about 
Leopard, 

The more we’ve dug into Leopard, the more we're finding lliaL is revolutionary than evolutionary, 
Regular end-users will notice many of the nice little touches that show up in 10,5, but the real action 
is under the hood. When 1 initially heard developers speak about making their next releases Leopard- 
only, 1 thought that may be a short-sighted move. However, Leopard does so much for the developer 
and lech-type, I can understand that thinking now. End users will benefit from the parts of the OS 
that they never touch themselves by developers taking advantage of them! 

To lead off our Leopard coverage, do not miss Greg Miller's article on DTrace If you haven't 
noticed yet, gone are ktrace and some of our other tried-and-lrue debugging tools. As the biggest 
beneficiary to the open-sourcing of Sun's Solaris, Apple puts dtrace into 10.5, Now, dtrace is incredibly 
powerful, but isn't quite as straight-forward as some other tools, Greg has written the clearest 
introduction to dtrace that Eve seen. 

Ben Greasier talks Lo sysadmins and points out the 5 technologies iti Leopard that they should 
lie checking out right away. Separately, Ben has written an article on the Inclusion of RADUlS support 
in Leopard - a very welcome addition, praised by system administrators familiar with the benefits it 
brings, 

Dave Drtbin takes the Leopard side-street in this months Road to Code to talk about what's 
new for developers. Dave points out new features in XCode, Objective C 2.0, various frameworks 
and more. 

Philip Rinehart and MacEnterprise get you started with the radical changes in directory 
services. Did you know that the venerable Netlnfo is gone in Leopard? Gone! Directory Services 
play a much larger role in Leopard than ever before. 

Well, we couldn't possibly cover all of Leopard in a single issue, and there are still plenty of non- 
Leopard-specific topics Lo discuss. One of my favorites this month is an article by Joe Froehlkh that 
teaches us about a device that converts a VGA signal to one that can be captured - independent 
of the OS - on the USB, 

Ever need a little more storage? Of course, we all do! However, sometimes, you're looking for 
something more than li single Firewire drive, but less than a fully-loaded XServe RAID. Robert 
Staehle shows us how to use FreeNAS, an Open Source FreeBSD-based NAS system that you can use 
at home, or in a business setting. 

Back in Leopard land, don't forget that not only is the OS overhauled, but the built-in apps are, 
too, MaiLapp, Safari and.. Terminal?!? Yes! For you command-line people, Terminal.app 2 has some 
really nice features, and you can learn about them in this months Mac in The Shell 

Last, but not least, is this month's MacTech Spotlight featuring Kent Sutherland, Kenl is 
currently a student at the Rochester institute of Technology and has already graced us with code that 
we can’t live without (ok, well, some of us). He's most well know for Cliax, an Input Manager bundle 
that adds features to iChat, but he also..,.well...go read the feature! 

Enjoy Leopard, dig in to our coverage here, and dig in on your own. If you find something that 
just isn't documented anywhere else, let us know! Send your thoughts to feedback@macfech.com. 
Hope to be hearing from you! 

Edward Marocak, 

Executive Editor 
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5 Leopard Features To Make 
w ’ Happier 


Here are a few features that will make your life 
as a systems administrator easier 


by Ben Greisier 


Life as a Sys Admin 

Being a systems administrator is hectic and stressful Lucky 
for us some limes we gel a bit of help to make life a tad easier, 
With the introduction of Leopard, we have been given some 
tools that will help out just the little bit that makes a difference 
lo our daily work. 

Here are 5 features that are included in Leopard that while 
aren't earth shaking, will just help out. Some of these features 
have been available using third party software or simply by 
some home brew scripting, but they arc now built-in and this 
means Apple has been listening. 

Terminal 2 

The two new features in Terminal 2 that 1 see as the most 
useful are tabs and window groups. Tabs fall into the His afxnii 
time" category. As handy as tabs are in a browser, they are just 
as handy in Terminal 

After spending time setting up terminal windows just 
exactly the way dial we wane it is now nice to be aide to save 
all thill work in multiple windows as window groups, A simple 
click brings those windows back to us, 

Check mu Fd Marczak’s “Mac In The Shelf’ column this 
month on Terminal 2 in this issue for more information. 

Screen Sharing 

Sure you say, “I already have AKD, Why do I need 
Leopard’s screen sharing?" The way that I set 1 it, you are 
wandering around the office lltxir working with users and you 
need to check something else on another machine. Bingo! You 
just fire off screen sharing and off you go. Ii is as simple as 
clicking on the Share Screen button in a Finder window. This is 
a convenience feature that I am sure sys admins will find great 


use for as time goes on. Screen sharing is based on VNC so plan 
accordingly. 



Fig. 1. Screen sharing is now a standard OSX feature 


Instruments 

Instruments is billed as a code-debugging tool with the 
power of Dtnace, but I see it as much more. Designed to allow 
a developer to view various aspects of the system while an 
application is running, this is just what a sys admin needs when 
Lroul>iesflooting issues* 

Instruments is part of the Developer Tools package and 
lives in the Applications folder within Developer folder. It has 
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an interface that will be familiar to any Mac user and visualizes 
w hat happens when during the use of an application. 

Please see Greg Miller’s DTrace article (p.66) and Dave 
Dribin f s “Road to Code (p,28) n column for more information. 



i I m! hi — ta a ■ 

Fig. 2, Instruments allows powerful inspection 
of applications while they run 


Spaces 

Another member of “It's alxjut time” features is Spaces. A 
window manager similar to those available on any standard 
Linux install, you get to associate applications with virtual 
desktops. I don't know about you, but l never thought that 


Expose was a real answer to screen real estate issues, so l am 
happy to have Spaces as a standard part of the OS. 

Life becomes more organized when you can dedicate a 
screen to a specific purpose. Combine Spaces with a tabbed 
terminal and you get a very manageable work environment. 
Combine that with a pair of 30 inch Cinema displays and von 
have quite the effective administration system. 



Fig. 3. Configuring Spaces to give each app 
its own place to live 


Server Admin Notifications 

While we don’t have as comprehensive notification; as I 
would like, the one simple notification for disk space is a greaE 
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your firewall to prevent intrusion, or keeps all 
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lx>on to those si mat ion where wider ranging monitoring isn’t in 
place. Sys admins/sdiool librarians who are in charge of OSX 
seivers will love this simple feature that will avoid filled drives 
that are all too common. 

This feature is part of Server Admin in the Notifications tab 
within Settings, It is limited to sending an email when the free 
space tails under a defined amount and at this poini it doesn’t 
allow you to specify which drives to monitor, but it is a step in 
the right direction. The File Si taring pane in Server Admin makes 
a quick job of scanning disk space with the bar graphs and I 
hope they allow finer grained monitoring in the future. There is 
also a Server Admin widget for Lho.se who find Widgets useful 



Fig. 4. Enabling notifications for disk usage 
in Server Admin 
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Fig. 5. Monitoring disk space with Widgets 
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Conclusion 

The release of Leopard shows us iliat Apple has Ixvn listening 
and is trying to give us tools that make managing OSX and OSX 
Server easier* leopard is new and t am sure we will discover new 
features as Apple releases them. This is just a short list of items for 
the system administrator, but there is much more goodness in 
Leopard that isn't specific to the sys admin. 

Items like external home dj n't lories can change the way we 
handle user data along with Time Machine. New versions of 
directory services, changes to launehd, collaboration software, 
clustering for VPN services, wide are Bonjour and improved 
Spotlight are all things that will positively impact our work and the 
user experience. 

As J wrote tills article l found more and more little items that 
I on see as Ixing helpful down the rtxtd. It will take some time to 
find them all and see just how useful they will be, but 1 am liking 
what I see. Hie jury is still out on the simple setup feature of OSX 
Server, hut I don't think lex) many sys admin s will fx^ using it. 
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Mac in the Shell 

by Edward Marczak 


Leopard 
Terminal.app: 
Create Your 
Workspace 

Have all the comforts 

of ~ 

_ / 

Introduction 

Of nil the new features that leopard brings, one might not 
think ihai there could he excitement about Terminal.app. One 
would l>e wrong. Along with many others, Terminal.app is my 
primary interface to the system. Yes, I use applications like Word 
and MaiLapp, of course, but the bulk of die time, Fm looking at 
a green blinking cursor on a semi-tmasparent black background. 

I know I don't have to extol the virtues of shell “mastery any more 
- you’ve read that enough in this column. However, OS X 10.5, 
“leopard," updates Tormina Lapp in some nice ways. Let’s look 
at the changes, and then ways to customize your workspace ,so 
you're making your environment work for you. not against you. 

In the Beginning was 
the Command Line 

Perhaps the easiest thing to point out is that Terminal.app 
has a new icon. It’s amazing how jazzed we can all get over 
an application’s icon, but that’s just part of the Mac way, I 
suppose. 



Figure 1 - New TermmaLapp icon 


li works nicely with the other interface changes in Leopard; a 
little [latter, but much more stylized. 

If you’ve performed a dean install which, by the way, 
I'm a huge advocate of for major releases - and you're not 
using previous preference files, launch Terminal.app from the 
Utilities folder and you'll see a default terminal 


to ^ f* Terminal bash SO* 2 4 

Last Login: Tue Sep 11 14:37:23 an console 
Jack^erouac:- *2$ 


Figure 2 - a console window in its default state. 

Well, OK*,.a little bland, perhaps. Nor will 80x25 cut it in 
most cases. So, let's start with ihe easy stuff. Stretch that 
window out anti position it on-screen where it 1>est suits you, 
1 like vinual pagers, like Spaces and VirtueDesktops, so, I 
highly recommend that Terminal gets its own screen. You may 
also want multiple terminals open at once, and FI! touch on 
that a bit more later, but suffice it to say, I basically never have 
less than 9 VTs open at once on my local machine. 

Also easy; if you’re familiar with Terminal.app already, you 
won't lx* lost. Some of the prefs take a minute to absorb, and 
some items have simply been renamed (gone is “Connect to 
Server..," replaced with "New Remote Connection...”). 

A cry for sanity in our silent 
night of madness 

One Mac In The Shell column that has generated a good 
deal of feedback had screen as its topic. One of TerminaLapp’s 
new features happens to he labs, and most people would think 
that would do away with screen. Not a chance. 

if you’re in love with tabs, you probably have been using 
iTertn or Terminator to satiate your needs. Basically, tabbed 
terminals have existed for OS X, so, this is catch up for 
Terminal.app. Ifs a nice addition nonetheless. 

Now, I was lire first one that thought 1’tl just ignore lairs in 
Terminal.app. I already use screen, rightf Turns out. 1 find 
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them Ixirh useful. (If you need a refresher on screen, check 
out my original article which now appears on-line ul 
http://www.mactech.com/artides/mactech/Vol.21 /21 09/Scre 
en/indexhtml). 

Creating a new lab is as simple as Apple-1, which gives you 
a new tab in the current window with the default scheme. Or, 
mouse about to the Shell menu* choose “New Tab", and choose 
the scheme you'd like. Thankfully, we can change tabs with 
the same key commands available for tabs in Safari - Apple- 
Shift-1 and Apple-Shift-!. (This goes lor tabs in iChat. now. too). 
So, if your muscle memory is built up like mine, this is a nice 
addition. 

Once any window - tabbed or not - is created, pull up the 
window inspector using Apple-1, or Sliell->Show Inspector to 
change the properties of an existing window (more detail on 
Inspector later). See Figure 3 tor a look ai the Inspector itself. 
w T ith its settings tab open. 

I have screen give me 7 VTs at terminal start, and now. 
one terminal window gives me a two tabs. Why stick with 
screen? First, screen is less resource hungry than 
Terminal,app’x labs. Allocating a new bash shell under screen 
just pops up my memory usage by 800k or so. Each 
TerminaLapp tab takes up about 1.5MB. Why the heck am l 
concerned about this in the age of mulli-Gigabyte machines? 
Well, perhaps, that's just what 1 do. Plus, despite the 4GB of 
RAM dial my machine has, it still gets strained while running 
other apps, virtualization and yes, Warcrafl (1 can quit anytime. 
Really). So, that memory counts! 

Also, when shelling into a remote machine, 1 typically still 
have screen at my disposal, and can just fire up a remote screen 
session. It seems a bit wasteful to open up many local tabs and 
ssh each one of those to the same remote host. Finally, screen 
is just wired into my fingers, so, l stick with it for that and its 
other nice tricks (and I get to take my sefeenre file to my new 
home directory and have everything work as expected - what 
could lie Ixatcr?). 



Figure 3 - Terminal tabs and the Inspector window 
floating over. 
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the color of television, tuned to a 
dead channel 

Everyone has their own idea of what a perfect terminal 
screen should look like. Me? 1 like the ‘classic* look of green 
(or even amber) on black. That's just the way it was. But I also 
have a ‘classic' Commodore 64 looking terminal (blue on blue). 
While this may seem trivial at firsts you're going to be staring at 
these screens a /of. Also, you're going to need to pic k out text 
from the rest of the clutter on screen. So, find a color scheme 
that you like and a font that suits you. This has been made 
easier with the current incarnation of Terminal .app. 



Figure 4 - Preferences and Color Picker 


While slightly confusing at first, the new preferences really 
are simplified. Gone are the separate “Preferences" and 
“Window Settings" menu choices. Now t all ‘preferences 1 are 
consolidated. Colors, fonts, window sizes and more can Ik- 
found under the “Settings" group. You can easily define groups 
of styles that you like and save them for future use, and even 
export die settings for your or other’s use. 

One exceptionally nice touch is that if you have a saved 
terminal definition from, oh, you know, the Tiger days, just 
double-dick it. Not only will you Ixt looking at your familiar 
terminal, but Terminal,app 2 will import the setting, making it 
easily called up in the future. To this 1 say, thank you verymuch! 

Additionally, if you like to have multiple terminal windows 
open at the same time, the new Window Groups feature is a 
blessing. All you have to do is gel your terminals arranged as 
you like them; color, fonts, size anti position. Then, that can lie 
saved as a Window Group. Simply use the "Save as Window 
Group..." menu item From the Window menu, or, add iL with 
the button in the Window Group section in Preferences, 


L A A — _ 




M^C 

ICC 

C3 

M a g a 

z i n e 

i 

' ® 1 

store* mac tech.com 


Is your business drowning in e-mail? 



MailTank is your solution. Try it free. 

Learn more at http://mailtank.com or call 877-622-8265 

























SQL Connect 
in FileMaker 9 


Here's Why Servoy 
is a Better Tool: 


If you're using FileMaker Pro 9's new ability to 
connect to external SQL databases - or you're 
considering an upgrade - you owe it to 
yourself to have a look at Servoy. 

Why? Because FileMaker is not a "true" front 
end for SQL databases, in fact, they're the first 
to say so in their own white paper* Servoy was 
built from the ground up to give you a true 
front end into your SQL database^). 

Servoy doesn't force you to use proprietary 
ODBC drivers to connect to a limited number 
of SQL sources - you can connect to any SQL 
database with any JDBC driver you choose. 

Because Servoy isn't a database - it doesn't 
have to rely on workarounds like "shadow 
tables'' and "shadow fields" to interact with the 
SQL data - Servoy will just directly connect to 
thedatasource. 

Servoy supports server-side sorting and 
user-defined SQL queries so you get maximum 
performance and maximum flexibility when 
dealing with the back end databases. 


Servoy will automatically take care of "broad¬ 
casting" the changes that users make to other 
users, to help ensure the consistency of the 
data. FileMaker 9 doesn't. 

5ervoy allows you to have more than 100 
simultaneous users and will scale to whatever 
level you need based on hardware - it doesn't 
have the 100 connection limitation of 
FileMaker Server 9 Advanced. 

Servoy specializes in efficient, fast SQL code 
when talking to your SQL sources. Tine free 
Servoy Application Server has built-in connec¬ 
tion pooling, performance history, and 
supports inner and outer SQL joins. 

In a nutshell - Servoy was designed to work 
with SQL sources in the most efficient, flexible 
and seamless way. FileMaker 9 has added to 
the types of external files that you can connect 
to - but you can't touch, view, optimize or 
customize the SQL they generate. 

Which tool would you rather use? 


SERVOY 

Download a FREE trial at: www.servoy.com/mactech 


•Based an the FileMaker, Inc. white paper entitled "Inimduciion to External SQL Sources* available from the wwwYtfornaker.corn website as of July 16,2007. 
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Figure 5 - Saved Window Groups 


Finally, you can choose a Window Group to appear when you 
launch TerminaLapp* What a fantastic feature! 

As far as all of the other TerminaLapp accoutrements that 
you’ve gotten accustomed to, they're all still there. For anyone 
in love with Transparency, take note where the opacity slider 
has moved to. Interestingly, this lets you set opacity on any 
color element, including text and your highlight color. In other 
words, you can either end up with something very cool 
looking, or something dial impossible to read! 


It is by will alone I set my mind 
in motion 

What else has changed? There is one topic I haven't 
covered before in this column thai TVe had some people ask 
me about recently. Back in the day, when we would l>e talking 
about physical terminals, the host system had Lo know the 
terminal’s capabilities. The terminal that you were using 
possibly had a real, hardware limit on how many columns it 
could display, if ii supported color or blinking text, graphic 
support, etc. Ultimately, each terminal's capabilities got 
catalogued and placed into the tenneap database. Fast forward 
to a contemporary setup, and termcap has become term info. 
Same idea, different name. Figure 6 shows where in 
Preferences->Settings we declare which terminal type we’re 
emulating (what we re pretending to be}* 

Text Window Shell Keyboard Advanced 
Emulation 

Declare terminal as: f xterm-eolor ; I 

Figure 6 - Declaring our terminal type 
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Interestingly, if we're running screen - I use it as my 
shell - we get a terminal type of screen. There also happens 
to be a lertninfo entry for screen, declaring the capabilities your 
terminal will have. 

Ever notice how after looking at a man page, or say, after 
using vi, you get the contents of your terminal back, just like 
you had never am man or vi? Other programs will do this for 
you, too. Some physical terminals had an alternate screen 
buffer that apps are directed to, and when they quit, the main 
buffer is swapped back in. The xterm-color terminal in OS X 
mimics that. So, you’re poking around the filesystem using cd 
and Is nacl find a text file that you need to edit. Your terminal 
window is littered with browsing history and the prompt is at 
the bottom of the window. You fire up vi, edit the file, save 
and quit. Lo and lxdiold, you’re back where you were before 
editing. The serollback buffer shows no evidence of the vi 
session. 

screen, coincidentally, has its own serollback buffer that 
overrides terminal's. So, as items scroll past the top of the 
window, they seem gone. Using screen s serollback (ctrld by 
default), you can go back through terminal output, Personally, 
1 like my two-finger scroll, despite the mish-mash you get in the 
process. Apparently, many others do, to, as the first question 1 
get from people that l turn-on to screen is. “why can’t I use 
the scroll bar anymore?" 


This is an easy one with a nice fix - “nice" meaning that 
you can alter Lite l^ehavior for you. not touch the system 
defaults, and furthermore carry the change around with you in 
your home directory, screen lets you override the terminfo 
entry for a given terminal. Simply place the following line in 
your .screenrc Ole: 

torracapinfo xtent* 

Bail out of screen if it s already running and fire it up again. 
Use top. Go ahead. Now quit top. All of that output stays 
plastered all over your terminal Beautiful beautiful output! 
That line simply tells any xtertn running under screen that it no 
longer has die capability of an alternate buffer. It basically 
redefines die escape codes. If more of this type of skullduggery 
intrigues you, start with the term(5) man page. 

There’s a frood who really knows 
where his towel is 

Terminal 2 really brings some nice touches and 
conveniences to those of us who use a command shell as their 
primary interface to the system. Even if you don) use it as 
often as others, getting deep into the system as a developer or 
sysadmin means breaking out Terminal.upp on more than a 



Shoulder Bags Sleeves iPhone /iPod Gases Accessory Pouches Keyboard Covers 


MacCase Premium Leather 


B66. 526. ZZA 7 


WWW.MAC-CASE.DDIY 























imagine, amaze, inspire. 



you think it. you create it. 


www.realbasic2007.com 

Try REALbasic 2007 Release 4 risk-free! 
REALbasic includes a 90-day 
money back guarantee. 


REALbasic is the powerful, easy-to-use tool for creating 
your own software. At REAL Software, we call it a problem 
solver. You've probably said,"Wouldn't it be great if 
there was a little application that..." REALbasic fills 
that blank. 

REALbasic compiles native applications for Mac OS X, 
Windows and Linux from one set of source code. Each 
version of your software looks and works just as it should 
in each environment. You can even create a Universal 
Binary with one mouse-click. 


REALbasic is a trademark of REAL Software, Inc 
©3007 REAL Software, Inc 


Q REALbasic 









Your Mobile 
Broadband 
Mac Experts 


passing occasion. By this point, you should liave a productive 
and attractive (to you ) workspace that works with you. 

Media of the month; 1 should probably he recommending 
something !ja>p:tnlish. t can't just yet. But, I was in a lxx)k 
store (again) just the other day and realized how long it had 
l>een since I sal down and read fiction. Made up characters, 
made up places and made up tales. You need to be in touch 
with reality, but exercising creativity also ranks pretty high. If 
you've never ready anything by William Gibson, that's my 
recommendation. Kind one that you like. If you’ve never read 
anything by Neil Caiman, please, hurry to your local bookshop 
and pick up “American Gods" or “Neverwhere.” And if you T ve 
never put eyes to paper that contains ' The Hitchhiker's Guide 
To the Galaxy," then, run! Go now! 

We’re also getting dose to Macworld. So close that if you 
haven’t made your plans yet, you may be too late, hire up your 
web browser, purcha.se tickets, your travel and hold for this 
worthwhile event. Hope to see you there! f j ■ 
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The Road to Code. 


by Dave Dribin 

Leopard Detour 

What's new for developers 
in Leopard 


m ™ 


£ main.e 5 : 

^include <2t.rtia.hn- 


j mam.c 


tOi 


n raainO 




tut sain (in': argc, r r.it char * orgv[]) 
{ 

prtntf("rtcl to, Wa* Ldt\n^ 
return 8; 


Figure 1: Xcode error bubbles 


Short Detour 

In this month’s 7he Road to Code, we’re going to l>c taking 
a short detour from the usual programming road Instead of 
talking about Objcctivu-C and object-oriented programming, 
rm going to talk about Leopard. You may have heard about 
Apple's next generation operating system, Mae OS X 10.5, a.k.a 
Leopard. While much of the marketing buzz revolves around 
the new features available to the end-users, such as Time 
Machine, Spaces, and Cover Flow in The Finder, many 
improvements are in store for the developer, too. Since 1 still 
have not used Leopard extensively for development anti there 
are far more changes than 1 can discuss in a single article, I’ll 
Ixe picking out some of the highlights that I’ve already 
encountered or am looking forward to using. While this article 
will lx* most useful for existing developers, you'll still learn a 
lot about developing for Mac OS X, even if you're not an old 
hat. 

Development Tools 

There are many improvements in the existing development 
tools, but there are also a couple of interesting new ones, 

Xcode 

Leopard comes with a new version of Xcode, Apple's 
integrated development environment HUH), now up to Version 
3.0. The first change you'll notice is that the main text editor 
has received an overhaul. Hie most immediate difference 
you’ll encounter is that errors and warnings are now displayed 
inline as bubbles of text, as in Figure I. While tills is better 
than constantly keeping die build window open, or hovering 
over errors in the gutter to see the full message, it can also lie 
a bit distracting. The bubbles shift lines of text down to fit 
themselves on screen, and I find this makes it a bit hard to see 
context around the error in question. For now, Fm keeping 
this option enabled, as it may grow on me over time. 


The debugger has been I letter integrated, so that 
debugging doesn't require as much mental context switching. 
One of the best features is that the debugger can he invoked 
any time you run the application. There are no longer separate 
Build and Run and Build and Debug options. This is 
wonderful because often you are testing a program, only to 
realize that you'd like to set a breakpoint when something goes 
wrong. In the previous versions, you'd have to re-start the 
program under the debugger. Now. you can just set the 
breakpoint, and the debugger will automatically attach to your 
running application. In addition, there’s no longer a separate 
debugger window, which helps keep you focused on the 
problem at hand. 

Xcode 3,0 also provides the ability to refactor Objeetive-C 
code. Refactoring allows you to make your code more 
readable or simplifies its structure without changing the 
Ixrhavior. Other IDEs have had refactoring for a few yeans 
now, and it is a feature I am really excited alxiut. Some 
examples of refactoring provided by Xcode are renaming 
variable names (including instance variables), renaming classes, 
extracting a block of code into a method, and the ability to 
move methods up and down in the inheritance hierarchy. 
While some of these can he done with search and replace, 
refactoring, in addition to being easier, is usually more accurate 
since it is not purely text based. 

The long laundry list of changes does nor stop there. 
Here's a taste of more new features: 

Code folding and code focusing using a focus ribbon. 

Code completion has been simplified with inline code 
completion. 

Project snapshots allow you to experiment freely and 
revert code changes, if necessary. While 1 don’t see this 
replacing a full-blown source c<xie management (SCM) system, 
it is still nice to have. 

A better Build Settings editor, including the ability to set 
architecture-specific settings. 

The Research Assistant provides easy access ro reference 
documentation, without taking your focus away from the code. 
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Adds the ability to have versioned Core Data models. This 
helps data migration as your model changes over lime. 

GUI access to SOM repositories. 

For details, sec die *Xcode 3 0 Feature Overview” 
document. 

Interface Builder 

Interface Builder also reaches Version 3.0 with significant 
updates. Interface Builder (IB) has a long history, going all ihe 
way back to NcXTSTEP {the , nib extension is short for NeXT 
Interface Builder), and was ripe for an update* The user 
Interface has been completely updated for 3-0. Separate 
palettes for CIO controls have been replaced with the concept 
of a Library. All controls arc now shown in a single list, as in 
Figure 2. While the Library still groups similar controls, you can 
also search for controls by name. ITie list dynamically updates 
to show r only the matching controls. 
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Figure 2 : Interface Builder Library window 


IB also adds support for some new controls, but the one 1 
am currently most excited about is support for NSToolbar. 
Toolbars have previously needed to be setup programmatically, 
which can l)e a bit of a chore. Now, you can add a toolbar to 
a window, add items to a toolbar, and hookup their actions all 
in IR 

The Inspector Window has been improved to support 
multiple selection. This a is big time saver, since you can now 
set properties of multiple controls all at once, rather than 
selecting each one individually. The best part, 1 think, is that 
you can select any set of controls, and only the common 
properties are shown. 

My favorite update, though, is the ability for IB to 
automatically synchronise outlets and actions to header files. 
Gone are the days where you drag and drop changed header 
files from Xcode to IB to synchronize them. This single update 
alone will probably save you hours of frustration. 

For a full list of changes, see "Interface Builder 30 Release 
Notes," but here’s a quick list of other exciting changes: 

Support for Core Animation. 

Support for Tree Controller and Dictionary Controller. 

Real-time animation to visualize springs and struts. 

Interface Builder Plug-in model to replace IflPalette. 

DTrace and Instruments 

DTrace is a fantastic performance diagnostic and system 
tracing tool, originally developed by Sun Microsystems for 
their Solaris operating system, Sun released it as Open 
Source, and Apple has ported it to Mac OS X for Leopard. 
DTrace is a command line application that can he used not 
only to monitor system performance, but also as a debugging 
tool. For example, you can print out arguments of functions 
when they are called with very 1 little overhead, and without 
recompiling. DTrace is extremely flexible and even has it s 
own scripting language called D, so you can use to write 
custom tracing scripts. And DTrace isn't just for user 
applications. You can use DTrace on the kernel and your 
own kernel extensions, tot). 

But the goodness doesn’t stop there. Instruments is a 
new GUI performance monitoring tool, reminiscent of Garage 
Band, but for developers. You can add different 
“instruments” such as memory usage, CPU load, and object 
allocation, and you can sec these measurements change over 
time. Under the hood, Instruments uses DTrace and it’s 
essentially just a pretty face on top of libdtrace, the 
programmatic API for DTrace. This also means you can 
customize Instruments by writing your own instruments using 
D scripts* 

1 have not used DTrace or Instruments extensively but l 
am willing to bet that they will find a permanent home in my 
tool belt, along side Apple’s already fantastic list of 
performance tools, such as Shark. 
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Objective C 2.0 

The native language for Mac: OS X applications, 
Objective-C, also gets a new major revision, giving us 
Objective-C 2,0. in Objective-C 2.0, well sec fast 
enumeration, garbage collection, simplified property 
accessors, and enhancements to protocols. 

Fast enumeration 

Hast enumeration is combination of syntactic sugar and a 
speed increase. The old school way of looping through all 
objects of an NSArray is using an NSEnumerator, as 
follows: 

NSArray * colors * [NSArray arrayWithObjectu: 

@"red n . i’grean", i'blije", nil] { 

NSEnuBierator * e “ [colors objectEtiumerator] ; 

NSString * color; 

while (color * [e nextObjectl) 

1 

NSlog(#*CoIor; %#*■ color); 

1 

The new way to do this in Objective-C 2.0 is to use a 
special for kx)p syntax: 

for (NSString * color in colors) 

[ 

NSLogfe-nolor: , color); 

) 

Not only is this easier to read, but it is apparently much 
more efficient than good oF NSEnumerator. You can even 
add fast enumeration to your custom classes if you implement 
the NSFastEnuroeration protocol 


Garbage Collection 

One of the trickiest aspects of programming in Objective- 
C is dealing with dynamic memory management. Although 
reference counting is an improvement over malloc/f ree in 
C and new/delete in C++, it is still cumbersome and error 
prone. With Objective-C 2.0 comes garbage collection (GC) 
and ihe promise of making dynamic memory management 
painless. At a high level, this means you no longer have to 
send retain and release messages to objects to update 
their reference count. It also means you do not have to 
implement dealloc to free your instance variables. The 
garbage collector will find unused objects, affectionately 
known as garbage, and free them for you. It also simplifies 
your accessor methods. For example, instead of 
implementing setWidget: as follows: 

- (void) setWidget: (Widget f ) widget 
l 

if (_widget 1= widget) 

I 

[_vidget releasel: 

„vidget = [widget retain]; 

I 

I 

You need to simply do an assignment: 

(void) setWidget: (Widget *) widget 

{ 

_jwidget = widget: 

[ 

The garbage collector also handles retain cycles 
property, so you no longer have to deal with those specially. 
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This is common in parent/child relationships and using 
delegates. 

There is quite a bit more detail to garbage collection, 
especially if you are converting an existing code base, but 
ill is gives you a taste of what is available. It's also worth 
noting that Xcode 3-0 is itself a garbage collected application. 

I think this is a good sign for Apple to eat it's own dog food 
and it gives me a warm fuzzy that GC really is the way 
forward for new, Leopard-only applications. I think it wall 
also quell the gut instinct of many who believe that GC 
impacts performance too much. As 1 usually say to people 
who worry about performance: profile it before blaming 
something, I'm sure well see more on this topic as Leopard 
gets thrown through the ringer in the months lo come. 
Overall, I’m really excited to see get my hands dirty with GC, 
and 1 think it will make the learning curve for newcomers to 
Objective-C a little less steep. Oh f and in case you're 
wondering how all of your existing applications will work, 
garbage collection is disabled by default, so no 'worries. 

Properties 

Continuing the trend of making the programmer's life 
simpler is the introduction of properties. The concept of 
properties is nor new to Objective-C and is the backbone of 
Key Value Coding {KVC) t Key Value Observing (KVO), and 
Cocoa Bindings. After writing even a small amount of 
Objective-C code, you will find yourself writing a lot of 
boilerplate code lor KVC-compliant getter and setter 
methods, affectionately know as accessors. As f showed 
above, implementing accessors has been simplified with 
garbage collection. Nevertheless, it's still a lot of brainless 
code to write. You have to implement two methods for each 
properly, and if you can't use garbage collection in your 
application, it’s even more brainless code. Objective-C 2.0 
now has special syntax to work with properties. 

New keywords are provided to simplify the declaration 
and implementation of properties. First, the declaration: 

<®int*riace Person : NSUbject 
I 

NSString * _natae: 

I 

^property(copy, readwrite) NSString * name: 

Geml 

Hie ©property line is similar to declaring name and 
set Name : methods. It states that there is a property named 
name of type NSString *. The attributes given in the 
parenthesis customize the behavior of the property. In this 
case, copy means perform a copy in the setter, and 
readwrite means declare a getter and setter. A properly 
can be readonly if there should be no setter method. 
There are other property declarations, too, so please see “The 
Objective-C 2.0 Programming language” document for 
details. 

On the implementation side, there is a new keyword to 
generate the method implementations for you: 
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©implementation Person 
©synthesize name 55 .name: 

©end 

The ©synthesize keyword implements [he methods 
for property named name using the instance variable _name. 
Again, there are different ways to customize the property 
implementation so see the official manual for dcLails. 

The end result of using the property keywords is a lot 
less boilerplate code. But wait, there’s more! Objective-C 
also provides a new dot syntax to simplify property access. 
Thus, instead of invoking the accessors methods as follows: 

Person • person w », ♦; 

NSLog[©"Name: %©", lperson name]): 

[person sotName: ©*Steve Jobs"]: 

You can use the dot syntax: 

Person * person “ • * 

NSLog(©"NaJne: X©“, person.name): 

person.name ■ ©"Steve Jobs": 

Protocols 

The last feature of Objective-C 2.0 I'm going to introduce 
is an enhancement to formal protocols. Protocols define a set 
a methods that implementing classes must implement. Now 
methods can be defined as optional using the new 
©optional keyword ■ 

©protocol MyProtocol 

- (void) requiredMethod; 

©optional 

- (void) anOptionalMethod; 

©end 

Since optional methods are often seen in informal 
protocols, such as delegates, 1 think this feature will get used 
a lot. The benefit to using a protocol with optional methods 
over an informal protocol as that it makes your code more 
explicit and readable. It also improves the runtime metadata 
about an implementing class. For example, at runtime you 
can check to see if an object conforms to a formal protocol 
using conformsToProtocolbut not an informal one. 

Objective-C Runtime 

The features listed above are for the Objective-C 
language syntax, but the runtime underpinnings also get an 
update. Mostly, this is transparent, but if you do any low-level 
hacking, you'll want to read up on the new runtime AIM, For 
example, class posing has been deprecated, so you'll need to 
find another way to accomplish what you want. 

Much of the updates are for the new 64-hit 
implementation of the runtime. Because they didn't have to 
worry about keeping backward compatibility, some of the 
changes could be more extensive. Some of the 
improvements are better performance, support for non-fragtle 


instanc e variables, and zero-cost C++ compatible exceptions. 
Be aware, though, that some features that are only 
deprecated in the 32-bit implementation are removed 
completely from the 64-bit implementation, such as class 
posing. See “Objective-C Runtime Release Notes for Mac OS 
X vIQ.Y’ for full details. 

New and Improved APIs 

The tools and language are not the only area to see 
drastic improvements. There are new and improved APIs to 
go along with those changes. 

Core Animation 

Core Animation is one of those revolutionary APIs that 
will probably change the way nearly all Mac OS X 
applications look and tjehave. Core Animation takes die 
power of the graphics card and unleashes it to the masses. 
Typically, you would have to really dig deep into OpenOL to 
fully utilize this power, hut Core Animation makes it much 
easier by providing an API for fluid animation, 2D rendering, 
and 313 projections. 

Core Animation itself is a lower-level API, but the Cocoa 
Application framework provides direct support for it. At the 
simplest level, some properties of an NS View and NSWindow 
are now animat able. This means that the new value does not 
get set immediately, but takes place over time. For example, 
if you set the frame of a view like this, the frame gets updated 
right away: 

[aView setFrame; newFramej; 

Tf T instead, you use the animator proxy to set the 
frame, the frame wall animate to the new value over time: 

ILaViev animator] selFraiie: rie^FramH ; 

Besides the frame, other nnimarahie properties include 
the alpha value, rotation, anti background Core Image filters. 

If you want to fully utilize the power of Core Animation, 
you'll need to dig deeper into the lower-level API and work 
with layers. Layers are similar to view's, in that they contain 
drawable com cm at a specific geometry, but they are much 
more lightweight. For example, it’s possible to have 
hundreds of layers being rendered at once. Layers can be 
transformed, rotated, and zipped around using animations. 
Unfortunately, this is too large of a large topic to provide 
many details here. 1 suggest you read the “Core Animation 
Programming Guide" and look at the sample code for more 
information. 

Cocoa Application Framework 

The Cocoa Application Framework, affectionately known 
as AppKit gets a nice update in Leopard. AppKit is now 64- 
bit capable, meaning you can write 64-bit GUI applications to 
work with large amounts of data. In previous versions of Mac 
OS X, only Unix command line applications could be 64-bit. 
The nice thing is that there are not separate 3 2-bit and 64-bii 
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versions of Leopard. 32- and 64-bit applications can be run 
side-by-side on the same machine, and you can even include 
both 32- and 64-bit versions of your binary in the same 
application bundle. Thus, you can ship a single binary ro all 
your customers and not worry about what kind of machine 
they have. 

There are quite a few new views and controls, too. 
Some of the standouts include; 

NSCollectionViev to provide an animamble list of 
views, like the pictures in tPhoto, the Library in Interface 
Builder is a nice example of NSCollectiemVinw. 

NSG rad lent, a class to easily create and display color 
gradients. 

Native support for Heads Up Display (HUD) style 
windows. This is the dark gray, transparent window seen in 
many of the ilife applications, and ifs available in Interface 
Builder 

Better Cocoa Bindings support with improvements to 
NSTreeConLroller and NSArrayController and the 
addition of N S Die t io nary Con t roller. 

NSRuleEditor view to configure * rules" similar to 

Mail. 

NSPredicateEditor view to create complex 
predicate expressions used in queries. 

See the “Mac OS X vH).5 Developer Release Notes Cocoa 
Application Framework 1 * document for all the changes to 
AppKil in Leopard. 


Quartz Composer 

Developers tan now make their own Quartz Composer 
patches by subclassing QCPlugln. This opeas up the door for 
third party patches to make Quartz Composer even cooler than it 
already is. I am really looking forward to seeing what developers 
come up with, and how this is used inside of applications. 

See the “Quartz Composer Custom Patch Programming 
Guide” for the full details on creating custom patches. 

Other APIs 

Other new and improved APIs and features include: 

FSEvenLs to monitor file system updates. 

Core Data 21), which includes support for versioning of 
managed object models and migration of data from one 
version to another. 

Scripting Bridge to seamlessly interact with scripiable 
applications. For example, to get the current track in iTunes 
would look like: 

NSString * currentTrackName “ UiTunes curreutTrackj 
name]; 

The Calendar Store framework to provide access to data 
from die iCal application. 

Updates to the Instant Message framework to support 
injecting audio or video content into a running conference. 

The Image Kit framework to support drawing of images 
and easier image manipulation. 
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The PubSub framework to support RSS and Atom. 
Updates to QuickTime Kit to support audio and video 
capture* 

And much, much more! See “What's New In Mac OS X" 
Tor lIic complete lisL. 

Resolution Independence 

LCD monitor technology is improving rapidly, cramming 
more and more pixels into an inch than ever before. Ultimately 
this means crisper images and text. Unfortunately, there is 
currently little OS and application support for these higher 
resolution monitors. If no scaling is done, then text becomes 
too small and unreadable, If the OS tries to scale the user 
interface, then graphics can look pixelated or show artifacts. 
With Leopard, Apple is pushing developers to make their 
applications resolution independent. Resolution independent 
means that the graphics and text should look crisp and clear 
on all monitors, no matter their resolution. In practice this 
means updating your artwork so that it scales property. You 
also need to update any custom drawing code to make sure 
it docs not assume a specific screen resolution. You can test 
your application to see what it would look like at different 
resolutions using the Quartz Debug tool. 

Apple is obviously preparing developers so it can start 
using these higher resolution monitors in their products at 
some point in the future. We don’t know when ibis is, so it's 
better to start early and begin updating your applications when 
Leopard comes out. Consult the “Resolution Independence 
Guidelines” document for more information on I his topic. 

Other Languages 

'Hie final feature I'm going to highlight is the new support 
for scripring languages, such as Ruby and Python. It is now 
possible to wrile full blown Cocoa applications using Ruby 
and Python instead of Ohjedive-C. This has been possible on 
previous versions of Mac OS X by downloading third party 
bridge frameworks, but Apple is now including RubyCocoa 
and PyObje as part of the standard installation. This means 
you no longer have to bundle these frameworks with your 
finished application. It also means that Xcode includes 
templates for Ruby- and Pvilion based applications out of the 
box. Finally, it means that Apple will be supporting any bugs 
and issues that crop up with these bridges. 

To give you a small laste of what this means, here is a 
short example of subsclassng NSView in Ruby, taken from 
the DotView sample RubyCocoa application: 

require ’ofix/cocoa' 

clans UotViev < OSX;-MSView 

ib_oti tiers icolorWell* :sizeSlider 

dnf awakeFromNib 

Senior * OSX:iNSColor.cedColor 
©radius “ 10.0 


Heenter - OSX::NSPoint.new[bounds.size.width / 2, 
bounds.size,height / 2 ) 

©colorWel1,setColor(8c oloc) 

izeSlider. setFInatVa1ua(8 radius) 

end 

def drawRect (reel) 

GSX:iNSColor.vhlteGtitor.net 
Q$X::NSRectFill{bounds) 

dot_rect " OSX: :N5Rect .new(8center .x ©radius, 

©center.y - ©radius* 

2 * ©radius* 2 4 ©radius) 

©color.set 

GSX::NSBezierPath.besierPathWithOvallnRect(dot reet).fill 
end 

itef isOpaque 
true 
end 

def MouseUp (event) 

©center = convertPoim(event *locationlnWindow, 
;fromViev. nil) 

setNeedsDisplay true 
end 

def setColor (sender) 

©color = sender i color 
setNeedsDisplay true 
end 

ib action setColor 

def setRadius (sender) 

©radius = sender.floatVaiue 
setNeedsDisplay true 
end 

ib^action ;set Rad ius 
end 

Apple is also making ti easier for other Objective^C and 
Cocoa bridges by creating a new framework called Bridge 
Support. 

Conclusion 

Well, that's a whirlwind introduction to Leopard. The 
developer has a lot to look forward to, and I think it is a very 
exciting release. Next month, we’ll be buck to our regular 
scheduled programming: learning the basics of Objective ^ 
and programming for Mac OS X. f _ - 
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New ways of manipulating Directory Services 
in Leopard 


By Philip Rinehart, Yale University 


C ^ MacEnterprise.org 
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User Account Changes 

Occasionally, questions about user accounts and how to 
maintain them appear on the Maoenterprise list. Leopard 
changes the landscape, as Netinfo no longer exists What does 
this mean practically? All user account information is now 
stored as flat text files. No more messing around with 
command line utilities like nicl t nidump, etc. All access is now 
accomplished using the command line directory service utility, 
dscl. Let's take a look at how iL works. 

DSCL 

Dscl, Directory Service Command Line, utility was 
originally introduced in Tiger, With the death of Netinfo, it is 
Lite new way of manipulating user accounts. Also, astute users 
may note that Netinfo Manager is now completely gone, so any 
manipulation of Netinfo attributes must Ik* accomplished by 
using dscL Directory Service attributes can lx? changed, 
appended or deleted. Let's take a very basic example. 

dscl . -read /Users/mytiser 

This example operates on the local node by using the 
period, and returns all of die attributes for my user. The 
comma mi returns a list of all of the values that would have 
been seen in Netinfo Manager. They are printed out as a single 
line for each value. While interesting, il only begins to tap dscl 
for its true power. Here’s a second example, listing all the users 
on the local system, as well as their UmquelD values CUID). 

dscl /Local/Default list /Users UniqueID 

Tilts command is a really quick way to list any attribute of 
any user that is stored in the local Directory Services store. 
Notice a slight difference in this command? Instead of using a 
period, the full node is specified, in this case, the local 
database, /Local/Ddault. Let's step back just a second. Since 
Netinfo is gone, where is ail ihe information? Here is the 
complete path: 


/var/db/dslocal/nodes/Ete fault/ Users 

Explore the contents of the directory, notice how 
everything is a plist? One of the decisions made when moving 
away from Netinfo is that all of the information is now stored 
in xml plisl formal in the above directory, As an interesting 
side effect, any properly formatted plist that is added to the 
user will now appear on the system as a valid user. Returning 
to our UfD example, now that the U1D is known for any user, 
it is a pretty simple operation to change a l HI) on the fly. Back 
to dscl: 

dscl /Local/Default -create /Users/myuser UniqueID 503 

This command lakes the current UniquelD value for 
myuser and overwrites or it with the new value. Instead of the 
user’s previous value for UniquelD, a new one has now been 
put in place. Note that use of the create option will completely 
overwrite any current value. If the value does not exist, it 
creates it in the plist. 

PUMP IT UP 

All of our example dscl commands wall work in Tiger. Dscl 
in Leopard lias [>een beefed up considerably. It now has the 
ability to read subkeys through the use of additional command 
line options. If you ever looked at a Netinfo record that 
contained mex information, you know that mex settings are 
typically sent to the client as a plist. Now that this information 
is stored in a flat plist with nested values, dscl needs a way to 
manipulate the data. New- options have l>een added, readpl, 
readplf and createpl, ercatepli. Unfortunately the syntax is 
difficult to master, as it requires a very specific format. Here's a 
somewhat simplified example for managed preferences. 

dscl « -readpl /Users/myuser MCXSettings 
mcx_application data:com.apple♦fJnder 
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Note the syntax of the key, colons separate nested values. 
In tills particular case, the managed preference key for the 
Finder is read This example should give you a taste of how 
the command works, but getting the path exactly right can be 
a bit tricky. Fortunately, there is a way out of the weeds, with 
a new mcx options for clscl.. 

MCX! 

One of the major complaints in previous versions of OS X was 
tlie inability to easily understand and manipulate managed 
preferences. Leopard is the first version of OS X that has 
options to help manage via script, or the command line. It has 
also been quite difficult to Lroublcshriot managed client 
preferences, and to truly understand what is going on when 
managed preferences are applied Let’s took at our friend clscl 
again, this lime wilh an eye toward the options that were added 
to dscL I lore's a very simple example: 

dscl . -readtncx /Use t/my user 

Note how the information is returned. Each managed 
preference is returned as a set of values with a consistent 
format. So for example, if a Finder preference was managed, 
the value miglu look like this: 

App domain: com.apple,finder 

Key: ComputerVievOptions _Arrangernent 

State: always 

Value: None 
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Cool! The mcxread option is useful, hut even more useful is 
the ability to set, import and export keys with dsd and its 
associated mot commands. Imagine being able to set preferences 
from the command line from a client! A sample process could be: 

dflcl , -racxexport /Users/myuser ~o /tmp/export.plist 
con.apple.ftnrier 

This command exports the managed client settings for 
myuser. The settings can ihen be altered in the exported file, 
export, plist with any text editor. Once finished editing, use this 
command to import the changed values: 

dscl . -meximport /Users/myuser -d /tiup/export .plisi 

One note about this command, the -cl option deletes any¬ 
keys that existed previously If is equivalent to calling mcxdelete 
for every key found in the import file. There are many options 
available for command line managed preference manipulation of 
preferences, which are not documented in the manual page. So 
how can you find the proper options? Use the flag -mexhelp. 

dscl t mcshelp 

This short command returns all of the options available, 
and is quite thorough in its description of how to use the 
command line options. 

What if you only want to see what managed preferences 
are luring applied? A new command for Leopard, mexquery has 
been added. It can be called directly to present all of the 
options for any known user, group or machine. Here’s how: 

mexquery -user myuser -group mygroup -computer 
mycomputer 

T his command returns a list of all managed preferences for 
all three options. Additionally, it specifies exactly which 
domain the management is being applied from, If it is a user 
management preference, it indicates the managed preference. 
Very useful! Now that Leopard is finally out, a whole new 
world of discovery awaits us. As always, see you on the lists! 

Till 
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Using the RADIUS Service 
in OSX 10.5 

Ainned at Airports, but flexible under the hood 


Wm 




By Ben Greisler 


Why RADIUS? 

Controlling access to your 
wireless network has just become 
easier with the inclusion of RADIUS 
services in Leopard Server. Providing a 
central method for controlling user 
access to Airport access points (and 
other RADIUS capable devices), the 
Leopard implementation is Apple 
simple* 


RADIUS Services in 
Leopard 10.5 

Setting up RADI LIS in Leopard 
server is very straightforward You can 
either use the wizard or manually set ii 
up manually. Normally I would say 
that using a wizard is the easy method, 
but m this case even the manual 
method is very simple to follow. 

Regardless of the method, you will 
end up with a working set up. 

In my test environment 1 set up an Airport Extreme 
(round) and configured it to bridge. This has nothing to do with 
the RADIUS setup, but will be similar to how other wall be 
using it. I had a working CD master on jny network and I set 
up a group of users authorized to connect to the wireless 
network. 1 then bound my Leopard server Lo Lite OD and 
checked that 1 could recognize OD users from the Leopard 
machine. The RADIUS services can be set using SACL T s (Service 
ACL’s) making it very flexible from an authorization standpoint. 
Once that was set I was able to start the RADIUS configuration. 
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Fig. 1. Activating the RADIUS service in Server Admin 


Wizard Method: 

Open Server Admin and activate the RADIUS service in 
Settings/Services. This will make the RADIUS service available 
in the services list* 

In the RADIUS service Overview pane, dick the “Configure 
RADIUS Service...” button. 
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Fig. 2. RADIUS Service Overview pane 


The first page lets you chose what certificate you want to 
use. You can pick an existing certificate or create a self signed 
certificate. 
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Fig. 3. Pick your certificate or make your own 


RACHU5 *sn*r Certificate 

RADIUS nCtdi in certificate I o run Would you like lo 
0 Choose an easting MroHute 

Default fcil 

j Create* setf-signed cefttfcare 


MCfi&m. 

Magazine 

Get MacTech delivered to 
your door at a price FAR 
BELOW the newstand price. 
And, it’s RISK FREE! 


sfore.mactech.ccm/riskfire® 


With your Airports up and running, you should see them 
in the Add Base Stations page. Pick the ones you want to use 
RADIUS with and fill in the Airports administrative password, 
then dick ‘"Add/ Once the base stations have populated the 
Selected Base Stations window, click “Continue," 

Add Base 1 Station; 

Available Base Stations Selected Base Station; 


Name 

iF Address 

Name 

IP Address 

RAD.AP 
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Base Station Password: 

- ) 

( Add ) 
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Fig. 4. Select the Airports you want 
authorized via RADIUS 


The next window allows you set up who will be 
authorized to connect to the wireless network. We had set up 
an Open Directory group named “radiususers" in this example 
and selected it. 

RADIUS Allowed Ii 4 <irs 


OAllow all uiert 
0 Restrict to members of qioup 



Go Bac k f ComimiG 5 

Fig. 5. Pick your group to limit users or allow all users 


In the next windows, much like the final steps of 
configuring tin OSX Server, you tire given the opportunity lo do 
;t final check of your RADIUS configuration. 
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Fig. 6. Check your settings and commit them 


The service configuration process is now complete The services you 
conbgui ed are now avai lable Use Server Admin to make a drill tonal changes. 


Fig. 7, Success! Start logging in! 


Manual Method: 

The final window simply announces the successful 

configuration of RADIUS services* Open Server Admin and activate the RADIUS service in 

Settings/Services, This will make the RADIUS service available 
in the services list* 

In the RADII IS service Settings pane, we need to configure 
our certificates. If you choose a custom configuration you will 
be presented with you choices of where the certificates reside 
and a quick link to the Certificate Management page. 
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Fig. 10. Certificate management 


The RADIUS settings page has m “Edit Allowed Users..." 
button bringing you to the SACL's page where you can define 
which groups on l>e authorized 


Fig. 9. Certificate locations 
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Fig. 11, When defining an authorized group, you can use 
any method of building the groups for maximum utility 
such as nesting 



Fig. 12. The Base Stations window gives you the tools to 
manage your access points 

in the Base Stations window you can browse for Airports 
or add them manually 

When browsing for Airports, you simply pick the devices 
you want, ty pe in the administrator password for the device and 
the KADI US service does the rest. It will communicate with the 
Airport, define a random shared secret and restart die Airport 
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Fig. 14. If we now look at the Aiport in the Airport Utility 
we can see that the RADIUS configuration 
has been set for us 


[f we pick the 41 Add” button, we are able to directly 
configure an Airport, it won't be as easy, but it is necessary for 
Airports not visible while browsing. You will also need to 
manually configure the Airport in the Airport Utility with the 
shared secret. You could also set up non-Airport devices using 
this method. 
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AarPort 


Name: RAD_AP 
Type: Airport Exteme 
IP Address: 192,168-254.IS 


Shared Secret- 


Veri fy: 


Cancel £Add) 


Fig. 15. Configuring the Airport manually 


The selected AirPort network requires a password to join. 
Wireless Security: 


User Name joeuser 
Password: *•**••••! 
802.IX Configuration Automatic 


' fcftj 


TL5 Certificate bg^dlconsulting.com 


~ Remember password in my keychain 




Cancel • f OK 


To case the rollout to Mac clients, you can export an fi 8* l8 - ^ user experience when connecting to a 

Internet Connect plist. Click on the “Save Internet Connect File* RADIUS controlled Airport 

button. 


Save As: [RAD AP f ’ ! 

Where x Document; t 1 

Wirttess Network Name (SSiD-1. RAD AP 

Enter the name ai the AJrFort netwert of the connected hate station On client 
Mar; you can open this We in toictnei Conned to impair the RADIUS setimgj. 

, _Canc«t_ / fs«*e-j 


Fig. 16. Exporting the Internet Connect file 
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Fig. 17. With everything else configured 
we can get our clients connecting 


Command Line: 

RADIUS in Leopard is based on FreeKADIUS and is 
configurable via command line. Visit the man page for details: 

leaserverleoadminS man radium 


Tnke particular note of the ordering of the radius, con f 
contents if you decide to modify it directly. A change of 
ordering can make the server not work any more. This is noted 
in tlie man page and is worth repeating. 

If you want to examine the files that make RADIUS work, 
go to /ele/raddb. Logs Jive ai var/log/radius/radius.log. 

Conclusion 

RADIUS services in Leopard server is a great addition to 
the set of tool Apple has given us. While Apple's 
implementation is really aimed ai Apple Airport users, it should 
also work with other devices. 
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Integrating FreeNAS 
appliance software 
into a Mac environrrv 
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What This Article Will Cover 

The purpose of this article is to introduce the user to the 
potential of integrating a NAS device - an open source, Mac- 
friendly (AFP serving) NAS appliance - into a network 
environment. The article will focus on getting a FreeNAS device 
configured and running on a local network. FreeNAS indudes 
several advanced features such LDAP and AD support that l do 
not cover in detail This article will cover installation and 
configuration to a point allowing network access to the data 
stored on the device. 

Why NAS? 

NAS, or Network Attached Storage, is a means of sharing 
data and files via a network. A typical scenario is the use of a 
NAS device within a work group as a way to store information 
which allows multiple protocols access, such as NFS, SMB and 
AFP. As an example, in our office we work with applications 
that are specific to Mac or Windows systems that need to share 
common assets. A NAS is a logical solution that allows for the 
storage of such assets without the need to maintain a full file 
server. Even lor a home network, a NAS appliance can he a 
rational location for the central storage of music and video 
libraries. 

Why FreeNAS? 

My personal experience started by attempting to use a 
boxed NAS solution available either on line or from the local 
computer shop. I found out the hard way that the major brands, 
while claiming to support CSX, integrate an older version of 
AFP that does not support long filenames. Being cheap to a 
fault and having extra Intel PC’s hanging around my office, 1 
deckled to try out the Appliance Software route. There are 
other widely used NAS solutions that include 1u or 2u chassis 
preconfigured that only require adding drives: Ready NAS looks 
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to be a great solution. My goal was to build a cheap, massive 
(more than 4 drive) solution using mostly left over parts 
hanging around. To achieve this goal, FreeNAS fit my needs 
perfectly. An added benefit of using FreeNAS is that it is open 
source and can potentially be modified or expanded upon as 
my business evolves. A proprietary solution inherently lacks 
this flexibility. 

Evolution of Appliance Software 

Many specialized tasks have Ix-en distilled to a self-contained 
package of tools bundled with a compact version of an operating 
system (http; / / en.wikipedio.org/ wiki/SoFtwore_ Appliance). 
Appliance Software is perfect for dedicated tasks such as routers, 
mail servers, database applications. NAS systems and almost any 
other isolated task imaginable. There are various resources on the 
Internet for finding Appliance software but one of my favorites is 
the list hosted by VMWare (currently located at the following URL; 
http;//www.vmware.com/vmln/appliances/di rectory/). 
Appliance software can run the gamut from free open source, to 
commercial packages that can cost thousands of dollars. FreeNAS 
is an appliance software package. It is an open source initiative 
based on the FreeBSD kernel, 

Getting FreeNAS 

FreeNAS is available on the FreeNAS.org website. In the 
downloads section of site, there are several choices for versions 
and formats. Before downloading, it is best to consider how the 
appliance will be run. For my personal needs, a dedicated PC 
with a 3ware RAID card and 8 SATA drives is the plan. To save 
space in the case and avoid the added power demands of a 
dedicated hard drive for the OS, I've opted to run the operating 
system from a USB jump/thumb drive. The best option for tins 
type of a setup is to obtain the .iso of the latest build of 
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Free NAS. Normally for a production environment Fd 
recommend only downloading the latest "Stable 1 version of an 
open source package. But since Free NAS is currently still in pre¬ 
release (there is no 1,0 version yet), beta is the only option. As 
w r ith any new technology introduction, standard disclaimers 
apply: lest, test, and test prior to deployment to production! 

Target Box 

My target machine is a standard Intel based FC with a 
3ware 8500 series 8-port SATA card. Except for the RAID card, 
the PC is built with generic components (including 
motherboard, processor, ram and NIC). The power supply is 
500 watt with lots of drive connectors. I found a ‘RaidMax* 
chassis at a local Fry’s store with lots of room for drives and 
good tooling. For purposes of installing the FreeNAS software, 
I included a CD-ROM drive in the machine build. I he only 
potential ‘gotcha 1 is the system BIOS will need to support 
booting from tJSK if the OS is to lx: installed on the 
jump/thumb drive. 

Installation and Configuration 

Bum a CD from the ISO image you downloaded from 
FreeNAS.org, anti tool the PC from it - set the BIOS of die PC 
to boot from the CD if you must. The PC should toot with a 
FreeBSD kernel and detect the hardware connected, After the 
completion of the boot process, there should be a console setup 


menu with 9 choices. Insert the target USB jump/thumb drive, 
the console should return some messages that the drive has 
been detected. Since we plan to install to the USB drive we 
select item 9 in the list (Install to a hard drive/memory 
drive/USB pen, etc/). After some warning about erasing data on 
target drives there should be a submenu of 4 choices. Sub-item 
1 will install the FreeNAS using all available space on the USB 
drive. After selecting a single or two partition install (Sub-item 
2), the installer will ask for the legation of the source data (the 
CD-ROM). In my case, device ’acdO' is my source drive. So, l 
type: 'acriff at the prompt (without the quotes). After hitting 
return, the installer lists all the potential target drives for 
installation. In my case, again, device da0 r is the USB drive, so 
I type that name at the prompt. After a few minutes, die 
installation should complete and provide instructions For 
rdxx>ting the system. The CD can also now to removed. The 
complete FreeNAS installation consumes less than 40 megabytes 
so it should fit on almost any spare or unused USB drive. 

On the next reboot, the BIOS will need to to tweaked 
again to set the USB drive as the primary device After proper 
configuration of the BIOS, the machine should Ixiot into the 
FreeNAS OS from the USB drive (if your machine supports 
doing so). Otherwise, you can always install on a hard drive. 
When the system is booted, the original 9-item menu should 
present itself again. The first order of business will (>e to setup 
the network. Item 1 in the menu is used to Assign Interfaces. 
Meaning that if the system will have more than one NIC, this is 
where they could be set to WAN and LAN. For my purposes, 
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the NAS device will only be used on the local network so I only 
need to configure a single NIC as the IAN, After assignment of 
the interface, the system may need to be rebooted. This should 
be the last reboot until the system needs to lx v taken offline for 
maintenance. 

We should be back to the 9-item menu. This time select 
item £ 2\ this is used to assign an TP address to the device. 1 like 
lo manually assign an IP rather than use DHCP, that way, I can 
set my local DNS to point directly to the box and assign a name 
like nas.mydomuin.com Lo Lhe IP Follow the on-screen 
instmetioas to assign an IP and subnet to the LAN. The last task 
aL the console is assigning a webGUI password (item 3) Set an 
appropriate password by following the on screen instructions. 

WebGUI 


It's now safe to leave die console and reLurn to a machine 
running a friendlier interface. From another machine on the 
same subnet, launch a browser and connect to the IP assigned 
to the FreeNAxS tx>x. An authentication window should be 
presented, The username is ‘admin', the password should be 
whatever you assigned in the last step at the console. If 
everything worked correctly, there should be an interface that 
appears similar to that of figure 1. 
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Figure 1 - The FreeNAS web console 
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From this GUI, the appliance can now be configured lor 
the installed drives anti how the users on the network will see 
the drives, The first order of business is to show the FrceNAS 
OS the drives to share. One of die reasons 1 like 3ware RAID 
cards is that support for them is built into the kernel of FreeBSD 
(and hence into FrceNAS). 3ware has a BIOS-level interface Lhui 
allows the drives to lx: configured as a RAID device. In my 
case, I used that interface to create a 7-drive raid 5 system with 
one hot spare, FreeNAS sees the 3ware card and all 8 drives as 
a single disk. From the left navigation ttxilft, select Lhc Disks > 
Management ux»l then click on the small plus symbol towards 
the right edge of the screen to add a drive to be managed by 
FreeNAS. A subsequent screen will appear that allows selection 
of all the drives .seen by FreeNAS If there is existing data on 
the selected drive that needs to be saved, there is an option at 
the bottom of this subsequent screen to allow selection of the 
prefer matted file system. Be sure in use the ‘Apply Changes" 
button or nothing will be modified. 

Of note is that 1IF5 or 1IFS+ are not options, since these 
are Apple-centric file systems. If the drives are using HFS or 
HFS+ and the data needs to lx: preserved, the drives will need 
to be backed up from a Mac then restored to the NAS after it 
has been configured. 

Once a disk as been set in Lhe Management panel it can 
Lhcn lx. 4 formatted using the Disks > Format tool. There are also 
tools for the creation of Software ItAID and data Encryption. In 
my personal experience, the Software RAID was not reliable 


and 1 wouldn't recommend its use for any data that isn't being 
replicated someplace else. After the Format command is 
initiated on one of the disks created in the Management section, 
which might take a few minutes to complete, the webGUI 
should return a window with the super-block data for the drive. 
At tlie bottom of that window (hopefully) will lx: a ‘Done!’ 
message. Using the Disks > Mount Points tool the newly 
formatted drive should be visible. It should be set with a Share 
Name. 

Using the Access > Users and Groups command first creaLe 
a Group (from the Group tab aL the top of the screen). Then 
add a user If your network has an LDAP or AD server, you can 
point the FreeNAS to that device for a list of users. 

The last step in the process is to set up the sharing services. 
From the Services menu, select AFP (assuming the goal is to put 
the new NAS device on an Mac network). Click the ‘Enable’ 
checkbox in the upper right corner Then assign a name to Lhe 
server. Set the Authentication as appropriate. Don't foiget to 
click the 'Save and Restart AFP 1 button. 

Test the box by using the Kinder > Go > Connect to Server 
menu and connect to afp;//111.111.111.Ill (substituting the IP 
address assigned to the FreeNAS device). If all went well, a 
standard OS X authentication will appear, 'lhe user name 
created in the webGUI should allow mounting of the shared 
drive. 
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liter Karl Interactive’s Email Append Services can help! 


4' ...UM.: ® Email 

-Move Append 

-Your Holiday Services 

| Direct Marketing Plans 

Ahead of the Postal Increa 


The USPS Postal hike has cataiogers and vendors justifiably 
very concerned. Now that holiday direct marketing strategies are 
been planned, this postal hike represents a significant additional 
investment, without supplemental return. 

Over the last five years, many companies have shifted a portion 
of their marketing from print to online and email. With this postal 
hike in place, increasing your online presence is even more 
critical to the health of your business. 

Walter Karl Interactive can help your business by using email 
append and replacing your postal mailing with an email campaign. 

This approach will substantially cut postage expenditure and 
increase your margins. For those customers that fall off your 
mailing plan because of the time since their last purchase (and 


the resulting lower response rates), there is another option. 

Walter Karl Interactive can help you reduce your postal 
expenses by providing you with a permission-based email 
address for your customers. You can reduce the frequency of 
your postal direct mail campaigns to these online customers 
WITHOUT reducing the frequency of communications to them. 

Please contact Dan M. Babb at 954-660-0225 
or E-mail: dan.babb@wkirrteractive,oofn 
Website: www.AppendServices.com 

Mfcllt rr Kcirl 4 Gannett Drive. Suite 350 
White Plains. NY 10604 

■HT Tel: 954-660 0225 • Fax; 954-385-6610 
Visit us at: www, appends ervices.com * www,wkinteractive.com 
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Now What? 

The Ixsiuty of Free NAS solution is rhe unlimited potential 
to customize the device. There is no reason the kernel or 
installation environment could not he hacked to install almost 
any tool available in the FreeBSD ports collection. Some 
examples relevant to the example system would lx: installation 
of the 3ware command line tools lo administer die RAID 
device. To be truly fancy, a full version of Apache could be 
installed and add the 3ware web administration tool Ideas I've 
had, but haven't had the time to execute, would be to create 
an asset browser for image viewing on the network, or adding 
a subversion control database to the NAS for collaboration and 
project management. 

'All 
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Introduction 

Software is abstract and non-tactile by its very nature. It am 
be difficult to sec what it is doing and why it may l^e 
misbehaving. To get a better view of software, wc often use tools 
like gdb t leaks t Is of, and sc_usage, just to name a few. Wc 
even still use “caveman debugging” techniques like recompiling 
the code with additional print statements. 

A few years back, Sun Microsystems developed DTrace: a 
new and innovative way to trace running software on live 
systems. DTrace enables developers and administrators to “see" 
what their code, and others' code, is doing in a flexible and 
dynamic way, With the release of Leopard, Apple has brought 
DTrace to Mac OS X. 

This article will begin with a crash course in DTrace, If 
you're already a seasoned DTrace veteran, teel free to skip that 
section. We will then move on to some examples of how to use 
DTrace by exploring our Leopard systems and discovering what 
makes them purr. 

A crash course in DTrace 

DTrace is a software tracing facility that can dynamically 
instrument code by modifying a program after it gets loaded into 
memory, DTrace can lx; used on production systems with 
optimized binaries, without ever having to restart the application 
- let alone, recompile it! Moreover, DTrace is not limited to 
tracing user-space applications like most other tracing tools, such 
as ktrace, strace, and truss, Parts of the system, such as 
the kernel itself, that were previously off-limits to runtime 
inspection are now fair game. And. since DTrace instruments 
code dynamically at runtime, it has zero overhead when not in 
use. 

That said, DTrace will not, and should not, replace all of 
your other tools You'll sLill wanL to use Shark, Sampler, 


ObjecLAlkx;, leaks, instruments, etc. where they make sense. And 
lets not forget about good of fashion thinking. DTrace is not 
magic; it’s just another tool (albeit a powerful tool) in your 
toolbox. 

DTrace is often used to help answer questions about 
software, such as “Is function foo ever being called, and if so, 
by whom?", and “How much time is tny code spending in the 
pwrite system call?". However, you must know what to ask. If 
you are tracing your own software, you probably have a good 
understanding of how it's supposed to work, so coming up with 
the right questions might not be too difficult. However, if you're 
using DTrace to explore someone else’s software, it may !x j more 
difficult to ask the right questions, but never tear; well see later 
that there are some very common questions that are generally 
good jumping off [X)ints. As in life, the answer to one question 
often Ix'gets another. Follow your nose! Using DTrace is very 
much like surfing the web: your questions about the system are 
hyperlinks that when clicked will take you to another page lull 
of new links/questions, 

You interact with DTrace by writing small programs in the 
D programming language. These D programs can he saved in 
Lext files and run like shell scripts, or they can stretched out right 
on the command line for quick, ad-hoc use (or if you simply 
want tt> impress your friends). An example D script that totals all 
the system calls made for each process on the system is shown 
in Listing 1. 

Listing I: syscalLs_per_proc,d 

Totals up all the system calls made for each process 

syecali::;entry 

@Uxecname] " count 0; 
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I 

When run fur about 5 seconds on my laptop I got the following 
output: 

S sudo dtrace -s syscalis_per_proc.d 

rftrace: script •syscalls per proc.rt* notched 427 probes 


A c 

Quicksilver 1 
Finder 2 
Pages 2 
OirectoryServic 3 
[seven is <1 3 
mds 6 
ntpd 21 
WindowServer 22 
mDMSKesputider 24 
dtrace 38 
Terminal 85 


We could have also specified the D script on the command line 
as follows: 

$ sudo dtrace n 1 syscall::sontry l 
©[execname] = count() }’ 

Key Concepts and tlie D Programming 
Language 

The D programming language has syntax very similar to Cs 
and should lx.: very easy for C programmers to use. The D 
program structure, however, is more akin to AWK s and is made 
up of one or more clauses of the following form. 

probe descriptions 
/ predicate / 

( 

action statements 

1 

One of the key concepts in DTrace is that of a probe, 
which identifies a point (or points) of interest in the kernel or in 
a user process* Probes are identified by their prol>e description, 
which is either a unique integer ID, or more commonly, a 4-tuple 
written as provider:module:function:name 

Fields in a prol>e description may use shell-style glohhing, 
and omitted fields are assumed to match everything. For 
example, the probe description syscall:: read : entry 
identifies the beginning of the read system call by naming the 
syscall provider, any module, the read function, and the 
probename entry. The probe description 
syscall: :*read:entry, however, identifies both I lie read 
and pread system calls. You can see a list of many (but not all!) 
of die prolies on your system by running dtrace -1, 

$ sudo dtrace -1 j wc -1 

40808 

Each probe may be associated with an optional block of 
action statements that will be evaluated when the probe fires* A 
probe may also have an optional predicate that must evaluate to 
true before the probe’s action statements will be called For 
example, the following will use the built-in variable exec name 
and print the name of each pnx:eSvS that calls read. 


syficall:: read:entry 
I 

pHntf {“Xb\r*, execname) ; 

J 

And the following will only print the names of processes that are 
reading from their standard input (file descriptor 0): 

syscall::read:entry 
/argt) — 0/ 

t 

printf t "Tts\n w , execname); 

I 

II is not always insightful to see a separate line of output each 
time a prolx: fires, Instead, we may lx: interested in looking at the 
data in aggregate form For example, we could find the total number 
of bytes allocated by malloc by setting a probe at the entry to malloc, 
printing out fire sl/e argument (argO), then post-processing the data 
to sum it up. That would work. But DTrace makes this much easier 
by using aggregating functions and data structures called aggregates 
In this way, 1 could see thai Safari mallocs about 2.4MB on my 
machine when loading my wellsite's homepage. 

$ sudo dtrace -n r pidl47malloc:entry [ 
©total = sum(argO) 1 1 

dtrace: description 1 pid!47::mlloc:entry 1 matched 2 probes 

A C 

2414468 

Here's how that DTrace script (Le,, the argument to -n) breaks 
down: 

* The full “probe description" is 
pidl47: :malloc: entry, which uses the pld provider 
to set a probe at the entry of the malloc function in 
process ID 147 (Safari) 

* We do not specify a predicate, so the action statements are 
always executed when the probe fires 

* *The only action statement in this example is the use of 
the aggregating function sum, which totals the argument 
passed to malloc, and stores the result in the aggregate 
data structure named ©total 

* Nothing is displayed until we hit ctri-c; at which point 
©total is displayed 

* A large part of writing useful L> scripts is knowing what 
built-in variables and functions arc available* The 
following are a few of Llic more useful built-in D variables: 

* argO, .*., arg9 - The first 10 arguments to the function 
matching the probe 

* execname - The name of the currently executing process 

* pid - The process ID of the currently executing process 

* ppid - Hie parent process ID of the currently executing 
process 

* probefunc - The function name of the current probe 
description 

And here are some of' the more frequently used data recording 
functions: 

* traceO - Evaluates its argument and outputs the result 

* print£() - Like traceO, but takes a C-style format string 

* stackQ - Records a kerne! stack trace 
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* ustackQ - Records a user stack trace 

DTrace Architecture 

Users generally interact with DTrace through the dtrace(i) 
command, which is a generic front-end ro rhe DTrace facility (an 
alternative front-end is Instruments, which we will not cover in 
this article). D programs get compiled in user-space and sent to 
the DTrace virtual machine in she kernel for execution. In other 
words, the D scripts you write are sent into the kernel and run 
inside the kernel's address space. They- do not run in the dtrace 
process, nor do they am in the target process you are trying to 
instrument. This is important, and it is the reason we need DTrace 
functions like copy in and copy ins Ur, which are functions that 
copy data from user spac e into the kernel’s address space, 

DTrace providers live in the kernel and am he thought of as 
plugins to the in-kernel DTrace Framework. They are responsible 
for creating probes by instrumenting various parts of the system. 
Tile probes made available by a given provider an lx j listed 
using the dtrace command. For example, the command 
dtrace 1 - n proc::: will list all the probes available from 
the proc provider. The following are some of the providers 
available on Leopard and what they instrument. 

* syscall - System calls in the kernel 

* fbt (Function Boundary Tracing) - Functions in the 
kemei 

* proc - Functions related to the process life cycle 

* mach_trap - Mach traps in the kernel 

* pid - C functions (or individual instructions) in user 
space 

* obje - Objective-C objects in user space 

Figure 1 shows the relationship between some of the different 
components of DTrace. 



Exploring Leopard 

lad us now look at a few examples of using Dtrace to 
explore our Leopard system. Note that in order to minimize line 
wrapping we use /dev/stdin as the argument to dtrace - 
s, we type our D sc ripts right into the standard input, then dose 
standard input by typing clrl-d (AD). 

Tracing Objective-C messages 

Tracing system calls and other low-level functions can be 
fun and insightful, but it may also be too Low-level for some 
situations. Many of the great application frameworks on OS X are 
written in Objective-C, and it would be nice to trace them at that 
level. Apple apparently agreed, and they equipped DTrace with 
a provider for tracing Objective-C messages. 

The objc provider is very much like the pid provider, in 
dial tire provider name must include the process ID of the target 
process. The objc provider exposes Objective-C class names as 
probe modules, and selector names as probe functions. For 
example, the probe description objc123:NSView: 
isFlipped: entry would match the entry to the isFlippcd 
instance method on the NSView class in process 123- Let's try 
this out by watching what Safari does when it loads 
wwwunixjunkie.net: 

$ sudo dtrace -q -s /dev/stdin 
objc3447:::entry 

printf("%s %s\n rt , probemod, probefunc) ; 
A D 

dtrace: script rcatdted 6&BB8- probes 

(., . TONS of output omitted .*.) 

NSGoncreteNotifteation recycle 
NSGbject -retainCount 
NSCFString release 
NSObjeet -release 

NSGarbageCollectot -TdefaultCollector 
NSLock -lock 
NSThread +currentThread 
NSGbject -hash 

N5CFArray conntByEmimeratingWithState;objects’count: 

NSLock -unlock 

U.) 

A C 

That’s cool, but it's a TON of information* Willi a tool as powerful 
as DTrace, you can quickly find yourself w ith more data than you 
can grok. In this case, w e could lessen the output by sharpening 
t) u r | m) [ >e dese riplit >n k) mat cl i o n ly what we’ re real 1 y i merest cd 
in. For example, if we were only interested in methods dealing 
with URL handling, we could use the probe description 
objc3447 :NSUBL*: : entry. This quickly cuts the 66,000+ 
probes down to a manageable 300. 

Another w-ay to conquer this mountain of information is 
with an aggregating function, For example, let’s say we’re now 
interested in how long diese Objective-C messages take to 
complete. We could figure this out using the following T) script. 

Listing 2: objc_msg__timeSpd 


Figure L DTrace architecture 


This is a D script to quantize the running time of Objective- 
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C messages. We use the L i mes L amp built-in D variable to 
record the entry time to the Objective-C method in a thread- 
local variable. Upon the method's return, we quantize the 
difference between the current time stamp and the start 
time. $ tar get is a special D variable that evaluates to the 
P1D of the process under inspection, 

object ft r^et:: sentry 
I 

Belf >start ” timestamp: 

I 

objcStarJet;::return 
/self >stact/ 

I 

8 ~ quantize(timestamp - self-)start); 
self->start * 0: 

I 


value 
1043576 
209/15Z 
4194304 
0388608 
16777216 


Distribution - j - ■ count 

13 
9 
3 
5 
0 


This script introduces a couple new tilings: thread-local variables 
and (lie quantize function. D allows you to save variables in 
thread-local storage by using the se 1 f > syntax. These variables 
will lie available in other clauses that fire on the same thread. We 
also use Lhe built-in quantize aggregating function to build a 
power-of-two frequency distribution of the Objective-C 
messaging times; tins can be an incredibly powerful way to 
imerprei the data collected by DTrace. We see here Him most of 
the Objective-C messages completed within 2048-^096 
nanoseconds. 


$ sudo dtrace -s ob jc_msg_jtimes. d -p 3447 

dtrare: script 'objc_tiisg__t lines.d‘ matched 136042 probes 

A C 


y£i lue 

■ - —-— Distribution **'* 


1024 


0 

2048 


526082 

4096 


188440 

8192 


84940 

16384 


22815 

32768 


6999 

65536 


464 

131072 


82 

262144 


33 

524288 


26 


File activity 

It can be enlightening to see which files are accessed on a 
system. For example, you may see that Foo.app is frequently 
writing to some file, or maybe that Bar.app is calling stat{2) 
on a log file every 10ms. This Information can help you debug 
your own programs, or perhaps Ixmer understand the system in 
general. Below we use a small D script to prim out the name of 
each file as it's opened, 

S sudo dtrace -s /dev/stdin 
syscall;ropen*:entry 

prlnt£( M %s %s'\ execname, 
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copyinstr(argO)); 

A D 

dtrace: script p /dev/stdin' mulched 3 probes 
CPU ID FUNCTION: MAKE 

0 17584 open:entry Finder /.vol/?.3488lG26/5626f>9 

0 17584 open:entry Finder /.vol/234881026/562669 

1 17584 open: entry iChatAgent /Users/ jgm/U brary/Caches/♦,* 

0 17584 open: entry iChatAgent /Users/ jgp/Library /Caches/*,. 

I 17584 open rentry iQiat 

/Systei/Library/PrivateFraroevorks/* *. 

A G 


This script sets a probe at the entry to all system calls having 
names beginning with *open\ DTrace tells us that our probe 
description matched three probes. They are: open, 
open_extended, and open_noeancel. Our action statement 
prints out the name of the process (execname ) that caused the 
probe to tire, and the first argument (argO) to the function that 
matched the probe. Notice that we need to use the copyinstr 
function here rather than just printing argO directly. This is 
because 0 scripts execute in the kernel s address space, but the 
pathname argument to open is stored in user space We could 
also modify our D script so that it shows us which files are 
accessed most often, as follows. 

$ sudo dtrace -s /dev/stdin 
syscall::open*:entry 

©[copyinstr(argO) ] = count{); 


A D 

dtrace: script 1 /dev/stdln 1 matched 3 probes 

A c 

/Library/Managed Prr rprcnres/rnm,i3pple + Teriiiirial .plist I 
/1 1 1brnry/Preferences/com.apple,Terminal.plist 1 

/ Users /jgm/Library /Caches/coin. Apple. I Chat/Pictures /. , « 1 

2 

/,vol/234S81026/562669 

2 

/Users/ jgm/Library/Preferences/com. apple .Terminal .plist 3 

1 am a little surprised to see finder opening files in the / . vol 
directory, Volfs is a separate file system that is used to support the 
Carbon Kile Manager atop Lite BSD file system. It was used on 
earlier versions of Mac OS X, but it was removed in leopard. 

$ sw^vers -productVersion 

10.5 

$ df -k 

Filesystea 1024 blocks Used Available Capacity Mounted on 


/dev/d!r>k0$2 


81732372 38929758 42546818 48% 

/ 

devfs 



112 

in 

a loot 

/dev 

Ed esc 



1 

1 

0 100% 

/ dev 

map -basts 



0 

0 

o mot 

/net 

naap iiulo_hnmn 

S Is -al 

/ 

< 

O 

I— 1 

G 

0 

o ion 

/ home 

total 0 
drvxr-xr-x@ 

2 

root 

wheel 

68 Jul 

30 22:08 ./ 


drvxxvxr t 

31 

root 

admin 

1122 Sep 

16 10:22 



t do not have a volfs file system, but apparently, accessing volfc 
paths si ill works. 
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$ Is '1 /.vol/234881026/562669 

total 3512 . 

output snipped for brevity .,.) 

-rv-r--r-- 1 j&m staff 0 Sep 17 11:50 

I_am_on_your_desktop, txt 

Apparently, / .vol/234881026/562669 refers ro my Desktop. 
We ran see which functions are using these paths by joking at 
the user stack trace when they are opened, 

$ sudo dtrace -s /dev/stdin 
syscall::open*:entry 
/copyinstr(argO) = 

" / . vol/234881026/562669*' / 

{ 

UStackO ; 

] 

A D 

dtrace; script 1 /dev/stdin' matched 3 probes 
CPU ID FUNCTION:NAME 

1 17584 openicrctry 

lihSystent. B, dy 1ib'open$UNlX2003 + 0xa 
CarbonCore PBOpenIteraterSyric+0x2O3 
CarbonCore % FSOpenIterator+Oxld 

DflsktopServlcesPr Iv^THFSPlusIterator:: First {THFSPlueRefi) +Qx6f 


command in question. As we've already seen, the FID of the 
command is made available to our D script through the 
$ t a r ge t macro variable. 

$ sudo dtrace -s /dev/stdin -c "In Dirl 
Dir2" 

syscall:::entry 
/^id “ $target/ 

A D 


dtrace: script '/dev/stdin' matched 427 probes 
In: Dirl: Is a directory 
dtrace: pid 4389 has exited 


CPU 

TB 

FUNCTION:NAME 

1 

17950 

stat:entry 

1 

18368 

write_nocancel:entry 

1 

18368 

write_norancel:entry 

1 

18368 

write_nocaneel:entry 

1 

18368 

wr Ue^nocancel: entry 

1 

17576 

exit:entry 


This is interesting because we don’t see any calls to link, which 
is the system call ultimately responsible for creating the hard link. 
Let's see if we can get a heuer view of what In is doing, by using 
the D script in listing 3. 


Des k topServicesPriv’TBFSF I lie iterator: ;Next {THFSFlusRef+0x26 
DesktopServicesPrlv'TDFSPlusSynchronlzer;:,, T +0xb5 
DeskiopServicesPriv'TNode:: Synchronized! ldren (bool)+0x44 
DesktopServicesPriv'TNode::ReconcileChiidrenibool. 
bool)+0x63 

DesktopServicesPH v' TNode: tHatidleSym: (bool, bool. bool, 
booD+Qxlbl 

DeRktopServiceaPriv' TNodeSyricTask::*. ,+Oxda 
DesktopServicesPriv TNodeSynr.Ta^k:..+0x1 If 

DesktOpServicesPriv'TNodeSyncTask::8yucTaskProc(void *)+0*98 
Ca rbonCore' Privs teMPEnt ryPoint+Dx38 
iibSystem.B.dylib' pthread_stari+0xl41 
11bSy s torn,8,dylib'thread_start+0x22 

A C 

Looking at this stack, we can see that it is indeed the Carbon Pile 
Manager APIs that are using these volfs paths. Just as we 
expected. So, even though voifs no longer exists as a file system 
in Leopard, its main functionality still exists in the kernel to 
support the Carbon File Manager. Thanks DTracd 

Hard linking directories 

One addition in Leopard that has the potential to send 
shivers np spines, is the addition of directory hard linking. This 
functionality was added to enable Time Machine to backup large 
directory structures of unchanged data without wasting space. 
The canonical argument against hard linked directories is that 
they can cause cycles in the directory tree. However, Apple 
avoided this problem by placing some restrictions on directory 
hard linking. 

The only problem l currently see with diiectory hard links is 

that I can't gel them lo work. 

$ mkdir Dirl 
S In Dirl Dir2 

In: Dirl: Is u directory 
S sudo In Dirl Dir2 

In: Dirl: Is a directory 

Perhaps we can use Dirace to figure out what's going on. I jet's 
start like we normally do by looking at all the system calls made 
by In. We will use dtrace’s c option to am and trace the 


listing 3: 

Uses the pid provider to trace all function calls hi 
libSysterru To help limit the output we only look at user 
stacks with a depth less than 6. 

pid$targetillbSysiem*:;entry, 
pldStarget:libSystein*::return 
/ustackdepth < 6/ 

U 

And we will run it like this: 

$ sudo dtrace -F -s In.d -c "In Dirl 
Dir2 n 

dtrace: script Un,d“ matched 8679 probes 
In: Dirl: Ts a directory 
dtrace: pid 6171 has exited 
CPU FUNCTION 

1 <- __cxa_atexit 

I -> rindex 
1 <- rindex 

l > getopr $UNTX20G3 
I <- getopt$UNIX2003 
1 -) stat 

l -> _sysenter_trap 

1 > _error 

j <- _error 

J j > wa rn 

l <- _error 

1 £ vwarnc 

1 <- fprintf 

1 <- warn 

1 -> exit 

1 > exa finalize 

1 (* exa finalize 

l -> .cleanup 

1 <- _fvalk 

1 <- _cleanup 

1 exit 

1 -> _exit 

1 -> _sysenter_trap 

This script traces the function calls in libSystem* and it uses the 
-F (flow indent) option to visually indicate when functions are 
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entered and return. This output shows that stat is called, 
followed by functions to print the error message, litis indicates 
that In itself is detecting that the first path is a directory and is 
giving us the error without ever calling link. To get past this 
stumbling block, we will write our own simple C program that 
calls link directly. 

Listing 4: liliiik.c 

Given two file name arguments, creates a hard link from 
the first to the second. 

^include <unistd,h> 

^include <stdio.h> 
lot 

maintint arge, char *argvf]} 

I 

if Urge 1= 3) 
return 1; 

inr ret = link(ar£v[l|. argv[ 2 )J; 
if (ret I” Q) 

perrorl'Uitik"); 

return ret’ 

1 

§ gcc -o hiink hiink.c “Wall 
$ ./blink Dirl Dir2 

link: Operation not permitted 

$ eudo ./blink Dirl Dir2 

link: Operation not permitted 

OK, it still didn’t work, but at least we know that link is 
definitely being called We could use DTrace’s fbt provider to 
dig further down in the kernel and perhaps see why we’re 
getting this new error, but let’s not forget what we learned above: 
DTrace does not replace all of our other took It takes time to 
write D scripts, so maybe spending a few more seconds just 
thinking about the problem is a letter solution. In our ease we 
know that hard links do indeed work because Time Machine 
uses them. So, perhaps the problem is that we're trying to create 
die hard link in the same directory as the original, let's try 
creating the hard link to a directory with a different parent. 

$ mkdir NewDir 
$ ./blink Dirl NevDir/Dir2 
$ Is -lid Dirl NewDir/Dir2 

1140587 dtw-xr-x 1 jgra staff 68 Sep 17 18:08 Dirt/ 

1140587 drwxr^xr-x 2 jgin staff 68 Sap 17 18:08 

NowUlr/Mrf/ 

Cool! It worked! Dir2 is a hard link to Dirl and I don’t even feel 
dirty (nor did l need to be root). We can verify than die hard link 
worked by looking at the directories 1 inode numbers (the first 
column in our Is output). 

Conclusion 

As we've seen here, DTrace is a very' powerful and flexible 
tcxil, but it is just dial - a tool. And it’s Itest used in the hands of 
a skilled craftsman. Ihe OpenSolaris DTrace community provides 
a collection of useful D scripts, under the name DTraceToolkit. 
Thankfully, the code-smiths at Apple have ported many of these 


scripts to Leopard. You can get a list of the more than 40 
available DTrace scripts by running man k d trace. There are 
also examples of their use in /usr/share/examples/DTTk. 
One of the more useful D scripts is called dtruss, which most 
users will embrace as a replacement for ktrace. Some of the 
DTrace examples in this article could have Ixxm replaced by 
simpler dlruss invocations, but then what fun is that?! We 
wanted to play with DTrace. 

We’ve just Ira rely scratched the surface of the lip of the DTrace 
icelx-rg. We didn’t get to touch on the more exotic topics like 
□Trace’s “destructive” actions, the fasttmp provider, instrumenting 
individual instructions, or accessing external variables using ihe 
scoping ojxrator. Ihe technology behind DTrace is impressive, and 
it Is open source so you can see wlutt is happening behind die 
scenes. Perhaps Apple w ill provide so me DTrace doc umental ion 
soon, but in die meantime you can find a lot of documentation on 
Sun’s website a! http://www.sun.com/bigadmin/content/dtrace, 
on the Open Solaris welwiie at http://www.opensoJaris.org/ 
os/community/dtracec, or better yet, just Google it! 

\W\ 
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Easily capture video from 
any VGA or DVI device 

Discover how to grab raw video frames and 
stream them to your preferred capture utility 


■ 

By Joe Froehlich 


How did you do that? 

At one [X)im or another, you’ve most certainly used the 
infamous (Command! (Shiftl [4] key sequence u> take a screen 
shot of an application window or a dialog box that reports a 
particular error And, if you prepare training or technical 
documentation on a regular basis, you’ve probably graduated 
to a more sophisticated screen capture utility like Ambrosia 
Software's Snap/Pro X, 

But, how do you capture the screen that appears when 
you launch the Mac OS X Startup Manager, shown in Figure 1, 
for example? Furthermore, what if you need to record a movie 
of the cmire Ixxa sequence for troubleshooting or training 
purposes? 



HD s«f«r v«&c x mu cut 


Figure I: Mac OS X Startup Manager 

You ain’t use the tools we’ve just described because the 
operating .system isn't loaded yet and there's no way to launch 
a capture utility. In this article, well show you how to capture 
not only static images like Startup Manager, hut entire video 
streams from any VESA-compatible VGA or DVI source, 
including industrial, scientific, and forensics equipment. 


Discover the magic 

To acquire images and data streams like those we're 
discussing here, you typically need to use a frame grablxr that 
captures the raw data generated at the output of a VGA or DVI 
source, regardless of whether the source is a computer or some 
other type of equipment, Most frame grablxrs are available only 
as internal PCI expansion cards. Unfortunately, this limits the type 
of equipment you can use to capture source content. On the other 
hand, Fpiphan Systems, Inc provides an external USB .solution, 
obviating the need to rely on internal expansion cards for tills task 
and providing convenient portability at the same time. 

Epiphan's product family, appropriately named VGA2USB, 
includes several distinct devices, including the LR , HR, and Pro 
models, which differ primarily in the image resolutions and 
frame rates they support, A DV12USB product Is also available 
to suppon DVI source equipment. A comparative summary of 
all product spedflcatioras is available via the Frame Grabters 
link on Epiphan's website (www.epiphan.com). Figure 2 
illustrates the standard version of VGA2USB; Lite other devices 
look similar Inn differ in the color of their respective enclosures. 



Figure 2: VGA2USB frame grabber with VGA port (left) 
and mini-USB port (right) 
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Plug it in 

Prior to connecting the product Lo your equipment, you 
need Lo install the streaming software on a system you want to 
use as a capture workstation; the source equipment doesn’t 
require any software. The streaming software includes the 
following items, all included in a single installation package: 

* The USB device driver 

* The v2u capture and diagnostics utility (installed in 
/usr/bin/) 

* The vdig QuickTime digitizer (installed in 
/libra ry/Q u ickTime/ Qu ick VG A2USB . component) 

To install the software, download rhe latest version of the 
installation package from www.epIphan.com/downloads/, 
unpack it, and run the installer. Once the Installation is 
complete, connect the source equipment to the VGA2U5B 
device, and the VGA2IJSR device to a USB 2.0 port on your 
capture workstation, as shown in Figure 3, 



VGA/DVI 

Soirt-rp Eqapmmt 



Figure 3: Connecting VGA2USB to your equipment 


If desired, you can install either a passive or an active 
signal splitter to simultaneously display the VGA or DV1 output 
from the source on a secondary display. Doing so helps you 
monitor the source image during a capture session, for 
example. 

Next, open System Profiler and expand the USB device 
tree. You 1 !] see the VGA2USB device listed, as shown in Figure 
4. Before continuing, make sure the device is connected to a 
USB 2.0 port. 



Figure 4; The VGA2USB device as it appears in System 
Profiler 



START 

FAXING! 


Each subscriber receives 
faxes directly by email 
as PDF file attachments. 


Corporate accounts from 
3 to 100 + users available 



njmzemail 

Call: 800-964-2793 


M6C1KH 

















macforge.net 

J TM 

MacForge indexes and tracks open 
source projects that run on the 
Mac, or are likely to without 
modification. Thanks to 
MacForge, there's no need to sift 
through huge listings of open 
source that you can't use. With 
categories, filters, and more, 
MacForge makes it easy to find 
what you need. 



MacForge: 

Your Gateway to Mac Open Source 

www.macforge.net 


Sponsored by MCI MH 


And finally, open a Terminal session and launch 
/usr/bin/v2u. With no arguments, the v2u utility reports the 
detected signal, as shown in Figure 5; otherwise it repons no 
signal detected. For a complete list of arguments, enter 
v2u -h. 


0 0 0 Terminal bash — 80x24 

Lost login; Thu Aug 16 05:23:55 on consoLe 
Welcome to Darwin* 

Quad:~ netadmin$ v2u 

v2u: detected 300x600 (60.4 Hz) 

Quod:- netadmin$ | 


Figure 5: Using the v2u diagnostic utility. 


Make a movie 

While you can use the v2u utility to perform diagnostics 
and capture individual frames, you’ll probably want to use an 
Aqua application, such as QuickTime Pro, Lo capture video 
streams. There arc several other applications that you can use 
as well; for example, VGA2USB is certified to work with Adobe 
Premiere on both Windows and Mac platforms. Other third- 
party applications include Vara Software's Wirecast and 
Videocue as well as Boinx Software's (Stop Motion. 

Because each capture application offers different features 
and Capabilities, it isn't practical to discuss them all here. For Lhc 
purpose of thus article, well just give you a quick tour. In Figure 
6, for example, the video output of our server machine is being 
streamed (via VGA2USB Pro) to Wirecast, which is running on 
our capture workstation. When we click the Record button on 
the toolbar, Wirecast records a movie of our login session. We 
can then use QuickTime Player ro play back the movie. We 
could also use Wirecast Lo broadcast the stream if desired. 



Figure 6: Capturing a video stream in Wirecast 
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Need a Windows solution? 

If you wish, you can use a Windows platform to capture 
your streams as well, Epiphan provides its own Windows 
capture application, which is installed by default when you 
install i he drivers on a Windows machine. Of course, there are 
also several third-party applications that work with it as well. 
Figure 7, for example, shows a PC BIOS screen captured using 
Fpiphan s VGA2USB capture utility. 



Figure 7: Capturing a PC BIOS screen 


“Big deal,” you say? 

Al this point, you may be asking yourself, “Why not just 
use VNC, AR1X or some other remote monitoring solution?” The 
answer to Hits question is that, depending on the screen you 
need to acquire, these services may only be available much 
later in the boot process. Furthermore, they require you to alter 
the source by installing the appropriate software component. 
You can't use these solutions to capture a screen like Startup 
Manager or a PC BIOS, much less the video output of a non- 
computer device. 

While our demonstration illustrates a computer technology 
application, there are other environments in which a frame 
grabber is not only useful but is actually required, depending 
on the screen you need to acquire. Figure 8, for example, 
shows the output of sonogram. Other application environments 
include: 


• Presentations to remote audiences 

• Medical diagnostic imaging 

• Distance learning 

• Scientific device screen acquisition 

• Courtroom evidence recording 

• Security and surveillance 

• Industrial control system monitoring 
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Figure 8: Acquiring a screen from a medical imaging 
device 

Tn short, if you have a device that generates a VGA or DVT 
.signal and you need to capture its output without altering the 
source equipment (critical for computer forensics, for 
example), you need a frame grabber. 

Conclusion 

In tliis article, we presented a method for capturing static 
images as well as video streams from devices that are otherwise 
inaccessible using traditional screen capture utilities. Hopefully, 
you've learned something new and, if you have such needs, 
you'll undoubtedly want to explore solutions like this further 
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What do you do? 

I'm a nineteen-year-old, third-year undergraduate 
computer science student at the Rochester Institute of 
Technology in Rochester, NY. I work on Chax and other 
programming projects in my free time. Chax is an 
Input Manager bundle that adds features to iChat. 1 have also 
contributed to Adium as part of Google's 2006 Summer of 
CcxJe* 

How long have you been doing what you do? 

I initially released Chax in Decemtxr of 2(KJ5, but IVe 
been programming on OS X since my freshmen year of high 
school. In middle school I dabbled in Mac Toolbox/C and 
HyperCard, although at that age I wasn't old enough to really 
understand what I was doing -1 just knew that programming 
was something that I wanted to do. 

Your first computer. 

The first computer 1 used was a Mac list that my parents 
bought when 1 was about three years old. 1 was hooked, and 
I've txajn a full-blown computer addict and Mac user ever 
since. 

Are you Mac only, or a multi-platform person? 

Through most of high school I was an exclusive Mac user, 
but I’ve become more familiar with other platforms in the past 
few years, I much prefer using and developing on the Mac, but 
I do own a PC running Windows and Linux. It spends most of 
its Lime powered off. 

What attracts you to working on the Mac? 

A number of different things draw me to the Mac, one of 
ihem being die Mac community itself It's so cool that 
individuals or small teams of developers can create some really 
neat programs anti gel the attention of a large portion of the 
Mac community, 1 initially developed Chax for my own use, but 
it eventually attracted the attention of a bunch of users, blogs, 
and magazines. Being able to create somediing and actually 
make a difference is surprising to me, especially in a fairly short 
amount of time. 

If I could change one thing about Apple/OS X, I’d: 

I'd get Apple to put a higher priority on speed. It feels as 
if Apple doesn't put nearly enough time into optimizing new 
software. Aperture Iteing a prime example - 1 remember an 
early version of Aperture on a quad GS being virtually 
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unusable. While progressive releases do get faster, it would be 
nice to see Apple get this righi the first time around. 

What's the coolest tech thing you've done using OS X? 

The coolest thing that I've done in OS X, so far, is Chax. 
Although the InputManager injection method that Chax uses to 
load into IChat is one of ihc simplest ways of getting inside an 
application, it's cool how much you can do with Qhjective-C 
once you're in. Coding inside iChat has also lteen a great 
learning experience for me. I’ve gained a more detailed 
understanding of Object ive-C and better reverse engineering 
skills as a result. 

Outside of OS X, another projeti that 1 enjoyed was a 
computer vision projeti for a class that performed basic face 
recognition. There wasn't anything innovative about it, but as 
I’m still learning more about computer science every clay, l 
found it an interesting subject. As computers get faster and built- 
in cameras become more common, I'm hoping to see more 
applications dial use these cameras tor live input and perform 
more sophisticated linage processing in real time. iChat Theater 
in Leopard Ls a fun example, but applications that leverage real¬ 
time object or face recognition could !>e even more useful. 

Where can we see a sample of your work? 

Chax, and its source axle, is available for free on my 
website at h ttp: // www. ks i/the r. com 

The next way Tin going to impact IT/OS X/the Mac 
universe is: 

I’m not yet sure what my next big thing is going to be. 
Continuing with Chax in Leopard and beyond is certainly a 
possibility, but there's a lot more out there ihan just working 
off of Apple's applications. 1 am definitely going to work on 
more Mac applications and projects in the future. 
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